feat: production launch — email audit, team invites, security headers, router fixes

- Fix loyalty & monitoring router bugs (_get_router → named routers)
- Implement team invitation email with send_template + seed templates (en/fr/de)
- Add SecurityHeadersMiddleware (nosniff, HSTS, referrer-policy, permissions-policy)
- Build email audit admin page: service, schemas, API, page route, menu, i18n, HTML, JS
- Clean stale TODO in platform-menu-config.js
- Add 67 tests (unit + integration) covering all new functionality

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

app/modules/loyalty/definition.py

@@ -270,9 +270,9 @@ def get_loyalty_module_with_routers() -> ModuleDefinition:
     This function attaches the routers lazily to avoid circular imports
     during module initialization.
     """
-    loyalty_module.router = _get_router()
+    loyalty_module.admin_router = _get_admin_router()
     loyalty_module.merchant_router = _get_merchant_router()
-    loyalty_module.router = _get_router()
+    loyalty_module.store_router = _get_store_router()
     loyalty_module.platform_router = _get_platform_router()
     loyalty_module.storefront_router = _get_storefront_router()
     return loyalty_module